Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF3C822E115E11F196E334D5DAE4EC9C.roa
File: BF3C822E115E11F196E334D5DAE4EC9C.roa (raw, json)
Hash identifier: xJfMLagmm1fztFJKNdFnEMhHVdcLvHaitG5RfLTZdGQ=
Subject key identifier: D0:79:9D:12:D3:E4:74:82:76:72:13:A2:ED:9E:22:5A:BF:F0:70:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A011
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF3C822E115E11F196E334D5DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 08:56:46 +0000
ROA not before: Tue 24 Feb 2026 08:56:42 +0000
ROA not after: Thu 19 Mar 2026 08:56:42 +0000
asID: 395793
IP address blocks: 45.207.138.0/23 maxlen: 24
45.207.140.0/23 maxlen: 24
45.207.142.0/23 maxlen: 24
45.207.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106513 (0x1a011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 08:56:42 2026 GMT
Not After : Mar 19 08:56:42 2026 GMT
Subject: CN=699d67ce-9f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:11:3f:a8:4c:89:2a:39:72:a3:f2:cd:57:
a2:01:a4:8e:9e:68:af:29:e0:ba:6e:5f:07:b4:cb:
d8:d5:87:5e:28:8a:45:cc:6a:4f:47:0f:b1:16:ec:
2e:63:e3:4f:a1:7f:3e:bb:d1:bf:3c:fe:42:09:38:
9c:ae:e7:75:42:4b:34:e6:1e:31:6b:16:9f:33:64:
64:4b:84:1f:d4:81:dc:19:07:50:4b:a3:73:04:d7:
e8:cb:b5:29:b3:8a:51:4b:a6:03:c8:fd:ea:d7:57:
8b:57:56:62:95:ef:e0:aa:25:07:df:e1:37:7e:64:
74:d6:3b:39:f5:19:1e:d8:de:41:e7:2e:32:b1:f9:
1c:23:c4:7e:86:28:06:58:c5:37:48:f4:2b:91:35:
ed:9f:8e:c0:7a:1d:62:ba:71:7e:05:b3:4e:7c:88:
cd:82:ba:b7:22:d3:35:17:b6:b9:b1:6c:e2:69:02:
64:8e:30:d5:6d:1f:44:94:a0:b0:60:5c:a6:03:4d:
63:2a:ad:56:02:27:b5:82:3f:f4:57:10:fc:02:51:
51:b0:cd:ae:48:bc:f9:a9:2a:02:ed:e2:ff:ad:47:
90:64:44:bd:2f:5a:1a:91:63:67:58:fb:b9:d8:68:
42:67:95:8c:d2:27:7a:d4:24:f8:7e:46:d6:d8:bd:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:79:9D:12:D3:E4:74:82:76:72:13:A2:ED:9E:22:5A:BF:F0:70:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF3C822E115E11F196E334D5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.138.0-45.207.147.255
Signature Algorithm: sha256WithRSAEncryption
4a:bc:38:24:8b:07:ec:d7:7a:27:38:11:ac:a5:01:5f:a0:c8:
2b:41:3f:ca:8c:a4:21:d2:e9:bc:c3:e6:3f:79:a7:e0:cd:d9:
29:01:9e:67:c5:09:5e:e8:2c:8b:3a:7b:47:bb:02:98:aa:bc:
9b:3d:4c:4f:75:6d:05:41:9f:4e:b1:75:50:01:d5:e5:5f:51:
0f:a4:44:f6:8a:ac:dd:99:24:93:70:e5:8d:9a:25:a9:dc:b4:
c1:17:16:a1:bf:95:d8:18:dd:17:7d:6d:1e:d2:89:8d:7b:74:
1f:5d:b6:8c:3e:1a:6d:a0:ea:6e:e4:89:95:58:95:9d:ad:ea:
2a:b4:8b:71:ba:5f:8a:2c:22:88:89:1a:7a:74:da:44:dc:ed:
12:d9:3e:5b:e2:3d:10:72:72:38:42:02:dd:7b:86:d5:b9:51:
82:aa:b4:27:3f:88:d9:f5:16:c0:1c:df:1a:36:62:9b:67:89:
3d:a7:f0:6d:c0:5c:88:55:4e:18:56:91:4d:87:e5:ae:19:93:
c7:73:6d:3c:47:27:68:54:f9:55:33:43:3f:49:86:8c:16:1c:
79:5c:90:20:af:ab:ea:bb:6a:d8:ad:94:d9:5e:bd:91:e0:2b:
bb:c1:1e:83:dd:e4:17:b6:dd:83:ac:5a:e8:07:40:80:fd:9d:
5a:cb:0d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:10:42 2026 by rpki-client